SafeDep
Install GitHub App
Start for Free
SafeDep
Install GitHub App
Start for Free

Summary

Note: This report is updated by a verification record

osv MAL-2025-6025: Malicious code in napi-postinstall (npm)

Verification Record

Package compromised via npm token leak from phishing attack

Details

Note: This report is updated by a verification record

napi-postinstall@0.3.1Malicious
Verified
Analysed at: 10/10/26, 8:50 PM
Source: -
SHA256:
Confidence: High